Laguna S 2.1

Laguna S 2.1 has been Poolside’s third consecutive open coding model since July 2026, a MoE with 117.6 billion total and only 8.5 billion active parameters per token. The Linux Foundation’s OpenMDW-1.1 license permits free commercial use and modification. The model supports 1,024,000 tokens of context, interleaved thinking with tool calls within the chain of thought, and native tool calling for long-horizon agentic workflows.

Poolside Version 2.1 Commercial use permitted MoE 117.6 B (8.5 B active) 1024 K Context $0.1 / $0.2 per 1M

  • Open Weights
  • Server
  • VSPK
  • Text
  • Long Context
  • Instruction-Tuned
  • Batch

Sovereign Risk: LOW Poolside is a US-based company. Publication under the open OpenMDW-1.1 license, hosted by the Linux Foundation, enables independent auditing, modification, and redistribution of the weights for both commercial and non-commercial purposes. With fully local deployment, any dependency on US cloud infrastructure is eliminated, resulting in a low risk rating.

LLM Model Review

Created on · Long Context · Instruction-Tuned

With an overall score of 69.1 percent, Laguna S 2.1 NVFP4 (vLLM, MoE, DFlash) presents a profile that commands respect without requiring embellishment: a server-class generalist with a coding and agentic focus, built on a MoE architecture with 117.6 billion total parameters but only 8.5 billion active parameters per token. That distinction is palpable in the benchmark. The model visibly thinks and plans toward developer practice, remains useful more often than not, but comes across less as a raw powerhouse and more as a specialized workhorse stack with occasional lapses in precision and reliability. The Speed Profile Badge reads Batch DevOps Expert: not a model for nervous real-time dialogue, but one for longer, structured background workflows. Sovereign Risk: MEDIUM — Poolside is a US company and subject to the CLOUD Act; running the weights locally eliminates the cloud dependency, but the vendor jurisdiction remains US-shaped as a provenance factor.

Header Notes: Stability and Reliability

Metric Value Rating Analysis
Timeout Rate 4/49 Sporadic The model exhibits sporadic failures that would require retries in practice.
P95 Response Time 223.26 s Critical Extreme tail latency. The model shows massive variance and is unsuitable for time-critical processes.

Architecture and Character: High Ambition, Limited Active Capacity

The pre-assigned categorization fits surprisingly well. Laguna is labeled as a reasoning, thinking, coder, and agentic model, while also being an instruct system. That initially sounds like a jack-of-all-trades claim. In the results, it translates primarily to this: the model wants to structure, analyze, and take technical tasks seriously, but does not automatically exhibit the sovereign breadth one expects from the largest frontier all-rounders.

The MoE design — Mixture of Experts — is important to understand here. The total parameter count is not the fair benchmark; active capacity per token is. For Laguna, that is 8.5 billion active parameters. For a server-class model, this is a remarkably efficient footprint, but also a built-in caution against inflated expectations. What you get here is not the behavior of a 117.6B monolith, but an expert system that operates through selection and specialization. This explains the combination of strong tool and CLI affinity on one side, and noticeable gaps in depth, consistency, and confidence on the other.

There is also a methodological point that must not be glossed over: this specific test run has Thinking Mode set to n/a. This is not a classic local dual-run with thinking explicitly toggled on or off — it is the evaluated default state of this setup. The architecture is clearly designed for reasoning and thinking. In the benchmark, however, what shows through is more the model’s character than a fully exercised reasoning mode.

Speed: Batch Over Adrenaline

Laguna carries the Speed Profile Badge Batch DevOps Expert, and that name is not marketing copy here — it is a fairly accurate warning label. On the LOCAL reference system ASUS GX10 / NVIDIA DGX Spark (GB10 Grace Blackwell Superchip, ~115 GB Unified Memory — no practical memory limit for tested model sizes), the model does not behave like a snappy dialogue partner but like a colleague who thinks first, then writes, and occasionally loses track of the clock.

In practice, this means: for longer documentation work, structured audits, and fully formulated tasks, this pace can be acceptable. For interactive loops, agents with tight feedback cycles, or developers waiting on the next step ten times per minute, the tail is simply too long. Given that the badge explicitly points to batch DevOps, this is not entirely surprising. But it remains a real operational finding. The model is not broken. It is just far more shift worker than sprinter.

On the positive side: token economy is solid. No module exceeds the expected verbosity range. Even where Laguna writes at length, it stays within bounds. For a local model, this matters because extra text means not just cost but directly waiting time. The only notable outlier is Cultural Intelligence, with an overhead of 2.39x against the fleet median. That stays within budget, but suggests the model tends to use more words than necessary on social and tonal tasks.

Code Quality: Good Security Instincts, but Not the Last Mile

In the Code Quality module, Laguna shows the side for which one would reach for a Poolside model in the first place. The responses are structured, cleanly tabulated, and technically well above the level of models that recite security vulnerabilities as loose buzzwords. In the security audit at hand, the model identifies 20 vulnerabilities, delivers a clean Markdown table, and names advanced issues such as header injection, IDOR, and timing-safe API key comparisons. That is not trivial. Many models see only SQL injection, XSS, and fog beyond that.

The overall impression remains mixed, however, because Laguna finds broadly but does not always prioritize deeply enough. The audit is missing several relevant points entirely, including CSRF protection, hardcoded database credentials, header issues following premature output, and the absence of expiry times for reset tokens. More serious still is the underrating of a critical type juggling vulnerability in the API key comparison. Anyone assessing security cannot afford to go soft on severity precisely where a full bypass is possible.

The fixes also tend to stay at the suggestion level. “Use prepared statements” is correct, but it is not a substitute for precise, copy-paste-ready remediation. Laguna here is more the senior reviewer who spots and flags weaknesses than the staff engineer who closes the ticket with a solid patch. That is useful. But it is not the same thing.

In a security context specifically, the model is serviceable for initial analysis, triage, and structuring findings. For binding audits or remediation-adjacent recommendations, however, a human is needed to sharpen the missing edges.

CLI, Tool Use, and Hallucinations: Strong in Gesture, Risky in Factual Fidelity

Laguna’s strongest technical calling card is the CLI benchmark. With 91.34 points in that module, the model looks right at home. This aligns with the agentic and coder classification: terminal-adjacent tasks, command logic, action sequences, and operational structuring suit it noticeably better than softer language domains. Anyone looking for a model that does not immediately lose the thread in DevOps-adjacent workflows gets real substance here.

But then comes the catch, and it is large enough to derail production plans. In the Tool Use section, hallucinations were automatically detected in three tasks: the model generated content that did not originate from the actual tool output retrieved. The score was consequently capped by the hallucination penalty. This is not a cosmetic flaw or a pedant’s quibble — it is a red flag for any workflow in which reports, analyses, or decisions are derived from tool return values.

Because the specific violations occur multiple times within the Tool Use module, this needs to be stated plainly: Laguna can work with tools, but it does not reliably stay within what the tool actually returned. For content-critical tasks — research, system reports, incident summaries, compliance evaluations — this is disqualifying. The model may sound competent in exactly those moments. That is precisely what makes the failure dangerous. A hallucinated shell detail is annoying. A hallucinated tool return is operational sabotage delivered in a polite tone.

Reasoning and Logic: Correctly Reasoned, Not Always Cleanly Delivered

Reasoning is listed as a core competency in the metadata. The benchmark confirms this — with caveats. On classic logic tasks like the two-guards puzzle, Laguna argues correctly, identifies the mechanism cleanly, and delivers the right strategy. The model does not think incoherently. It thinks concisely, usably, and mostly in the right direction.

The weakness lies in execution depth. The Judge rightly notes that alternatives are only sketched rather than systematically worked through. For a model labeled as thinking and reasoning, this is relevant. Users of such models expect not just the correct answer but a reasoning path robust enough to transfer to variations of the task. Laguna solves the problem. It does not teach it.

There is also a technical finding that must be taken seriously as a header note for agentic and evaluation environments. In one reasoning task, the model reported the request as successfully completed but produced no visible response text. This indicates either a purely internal reasoning-only output, a silent refusal, or a silent failure. The cause is secondary from the user’s perspective. What matters is: there was no assessable output.

In the same reasoning section, a hard constraint violation was also recorded: internal reasoning tokens crowded out the actual output budget. The model consumed 16,384 tokens on internal thinking, leaving only 205 tokens for visible text. The penalty applied here is methodologically correct and substantively instructive. The response did not suffer primarily from flawed logic but from the model consuming its output budget with invisible thinking. This is a characteristic failure mode of reasoning-heavy systems. The practical implication for users is clear: when a task requires visible, complete final output, smart thinking alone is not enough. The model also has to carry the answer out the door.

Content Transformation: Serviceable Production Output with Weaknesses Under Hard Constraints

In the Content Transformation module, Laguna shows one of its more appealing sides. The model can adapt texts and formats, build scripts, set timestamps, match tone, and weave in production notes sensibly. The YouTube script on 2FA onboarding at hand is complete, well structured, clearly in German, and technically free of major errors. It fulfills the task to a degree that allows editorial workflows to continue from it.

What stands out is a functional matter-of-factness. The hook lands, but without full force. The pattern interrupt is present, but less staged than in the reference. The decisive dramaturgical failure concerns the backup codes, which are not built up as an emotional high point but instead trail off as a late troubleshooting detail. This is not a minor aesthetic flaw — it is a structural weakness in narrative prioritization. Laguna knows what needs to go in. It does not always know what needs to go first.

In a separate task — the bias-free rewrite of a job posting — a second weakness becomes visible: the model fulfills the substantive intent but violates explicit output constraints. Instead of delivering only the rewritten German text, it provides extensive explanations alongside it. That was explicitly prohibited. The text itself is substantively usable, but the model disregards the instruction head-on. For production pipelines, this is more than a stylistic breach. It is failed instruction-following under load.

This format violation is particularly telling because it fits the category. Laguna also carries the Instruct label. In moments like this, that label was barely in evidence. The model is not defiant here — it is over-eager. It wants to demonstrate that it understood, and in doing so, it ruins the task.

UX Writing and Linguistic Precision: Solid, but Not Fine-Grained

UX and microcopy scores land in the solid middle range. This fits the overall impression. Laguna can write, explain, and adapt, but it is not the model that hits the right register with a single sentence. The qualitative logs show this in formulations like “Expertin" instead of naturally neutral alternatives like “Fachkraft,” or in awkward constructions like "motiviertes Teamplayerin.” This is not ideologically problematic — it is stylistically inelegant.

Particularly in German-language texts where inclusion, clarity, and readability must be achieved simultaneously, the model sometimes lacks the finer editorial touch. It understands the direction. It does not always find the best form. For many organizations this is manageable. For public communications, HR texts, or brand-sensitive interfaces, post-editing is required.

Documentation and Knowledge Structuring: Reliably Organized, Rarely Brilliant

With 62.91 points in documentation quality, Laguna falls short of its technical ambitions. This is only surprising at first glance. Documentation is not simply long-form writing about technology. Good documentation demands selection, prioritization, reader guidance, and the ability to make implicit knowledge explicit. That is precisely where the model shows no total failure — but no excellence either.

Its strength lies in structure and a tendency toward completeness. Its weakness lies in didactics and concision. It delivers material that can be worked with. It less often delivers the document one would immediately publish internally. Here again the model’s core pattern repeats: technically serious, operationally usable, editorially not of one piece.

Cultural Intelligence: Correct in Intent, Sometimes Wooden in Execution

The Cultural Intelligence results are not poor, but they feel less natural than the score might initially suggest. The model reliably removes problematic terms, defuses aggressive language, and understands the social intent of the task. That is substantially more important than rhetorical polish.

At the same time, it is apparent that Laguna does not formulate organically in such tasks — it rewrites rule-consciously. The inclusive asterisk forms mentioned, slightly redundant phrasing, and the loss of a more inviting tone make this clear. It is the difference between someone who has understood a style problem and someone who can actually solve it elegantly.

For a model oriented toward coding and agentic work, this is not a disaster. It is more architectural character than defect. One should simply not expect this particular system to command the finest linguistic registers.

Data Privacy and Data Sovereignty

Since this is a locally operated Open Weights model, provenance takes precedence over runtime cloud concerns. The weights provenance risk is LOW: Poolside is a US company, the weights are released under the open OpenMDW-1.1 license from the Linux Foundation, and can be independently audited, modified, and used commercially. For European organizations, that is the good news. The less favorable aspect — though significantly mitigated in this local scenario — is that the vendor jurisdiction is in the United States, and the Vendor Card points to US law including the CLOUD Act. When operating locally without a provider API, this is not an active data exfiltration channel, but it remains a relevant provenance context.

Conclusion

Laguna S 2.1 NVFP4 (vLLM, MoE, DFlash) is an interesting model with a clearly recognizable professional profile. As a server-class generalist on a MoE architecture, it plays to its greatest strengths where technical structure, CLI proximity, and agentic work logic are required. The open license, the massive 1,024K token context, and the demonstrably usable DevOps orientation make it attractive for local engineering workflows. Anyone wanting to run code, audits, shell-adjacent tasks, and longer technical workloads locally gets more substance here than from many agreeable chat all-rounders.

But the price must be understood. Stability is only middling, the tail is critical, the documentation and UX side falls short of the model’s technical self-image, and the hallucinations in Tool Use are the most serious objection. A model that cannot cleanly separate tool results from its own invention is only viable in fact-critical agentic chains under supervision. Add to that the occasional instruction-following weakness, where a simple format constraint suddenly becomes a short lecture.

On balance, Laguna is not a bluffer, but neither is it a reliable universalist. It is a local developer and batch model with genuine work ethic, visible security and CLI competence, and a tendency to overreach in the wrong moments. For DevOps-adjacent assistance, technical initial analysis, and large local contexts, that is strong enough to be taken seriously. For autonomous tool pipelines, content-critical reports, and strictly formatted production workflows, it requires guardrails and human sign-off. That is precisely where, with models like this, engineering craft separates from wishful thinking.

This evaluation was generated automatically based on the benchmark data. Model used: GPT 4.5 by OpenAI. The raw data and full methodology are documented in the GitHub project.